
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json)
Hash identifier: Coqbxnwgp+yAwzSrV/U5UodiRHkmLWjvjln0kPHqMhs=
Subject key identifier: 5B:54:11:DE:B1:5A:28:59:69:16:7D:1F:AD:79:F4:4B:12:6E:5F:07
Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
Manifest number: 023A
Signing time: Wed 23 Sep 2026 02:25:46 +0000
Manifest this update: Wed 23 Sep 2026 02:25:46 +0000
Manifest next update: Wed 30 Sep 2026 02:25:46 +0000
Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: 8/LnQivzQhNGAlInAFSJaStGPr/gjeNejsTP4Ivjinc=)
2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: r8/9peTSjQhr0FyyL8WXDBdFlkEwEDLfGXbQKn3ob18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Validity
Not Before: Sep 23 02:25:46 2026 GMT
Not After : Sep 30 02:25:46 2026 GMT
Subject: CN=6ab338aa-8086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:1c:87:de:de:95:cd:3c:1a:14:7d:1d:e2:
aa:fb:b1:09:6c:f0:bd:f6:33:be:69:e0:cc:7d:5e:
03:03:d0:27:ae:8d:c4:02:1b:da:ad:c2:94:c1:c1:
a1:99:09:d2:6b:72:1a:da:b1:51:54:f4:d5:fe:59:
c9:82:01:48:90:d1:12:35:6d:6a:19:5c:65:56:d4:
d8:3c:26:41:24:3a:d2:93:c0:12:61:40:2c:74:22:
0b:f6:3e:b0:da:01:bb:77:c1:57:14:1c:6c:cd:35:
bc:c6:a2:71:ff:1a:cf:65:76:a1:87:1d:97:8a:fb:
df:09:1d:f5:64:20:90:6a:73:fe:3f:00:20:64:6d:
74:4b:71:df:6a:d4:4f:07:23:95:7f:1d:90:94:fd:
78:3e:00:c4:a6:1c:21:24:9d:68:0d:99:13:f8:06:
f4:1a:46:13:72:00:ef:32:9f:6b:5f:76:27:44:4f:
da:07:05:f3:f7:d4:2a:7d:46:09:34:65:3d:4e:6b:
8f:67:44:e9:b9:6e:02:8f:b1:96:27:9c:8e:15:32:
68:ac:50:23:33:7e:80:98:a3:96:f5:38:9d:c4:37:
5d:e2:9f:f5:82:b9:06:75:b1:39:b2:88:65:f5:88:
e3:35:34:b1:8c:2b:08:87:b2:18:57:5a:22:49:1c:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:11:DE:B1:5A:28:59:69:16:7D:1F:AD:79:F4:4B:12:6E:5F:07
X509v3 Authority Key Identifier:
keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:72:27:52:de:46:6f:a5:00:33:1d:c3:07:29:2a:cc:90:
bb:22:02:db:19:e9:ac:5e:29:fe:73:e4:14:12:aa:4e:d8:ce:
58:0c:80:ca:e6:40:b2:57:29:fd:d9:c2:38:72:28:63:22:4d:
d6:09:79:8e:1b:29:c7:7a:da:ac:c0:ca:5c:81:5b:a0:4f:d8:
88:7b:ee:b3:20:29:2d:60:0c:77:a2:a7:30:60:97:94:88:76:
3a:5d:da:34:24:1b:d1:eb:7e:17:9d:54:f6:4b:87:d1:69:ad:
56:ca:04:26:12:bf:0b:b2:d3:7d:86:d3:b5:9d:55:46:49:7a:
c8:64:32:55:d7:03:ce:69:86:2c:0e:14:d8:9c:45:e8:4d:7f:
1f:39:d9:32:e4:ca:d0:2d:cc:8e:b2:11:62:1a:8b:c5:44:24:
51:6d:1c:a8:3c:89:4d:f3:b3:56:a4:26:93:8b:79:c0:41:53:
0e:6d:d9:88:5e:55:64:bd:d6:0e:c2:ca:dc:06:3a:57:1f:8e:
eb:eb:36:b9:4f:c5:bd:85:30:a4:ce:c7:13:ca:c2:da:65:a0:
d0:75:9b:6f:77:f3:92:ce:5a:d9:d9:06:68:62:01:13:d8:84:
00:9c:2b:14:f9:98:77:e8:47:cd:09:3c:42:89:74:e0:9e:14:
97:b6:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:23:52 2026 by rpki-client